Skip to content
Snippets Groups Projects
Commit 341d1c7f authored by Steven Murray's avatar Steven Murray
Browse files

Dropping the krb protocol check for CTA admins

Before this commit, Daniele had hardcoded into the CTA
front-end the constraint that CTA admins must be
authenticated by krb5.

This commit drops this contraint for two reasons:

1. The xrootd/EOS configuration files already require
   operators to specify which authentication methods can
   be used.  Daniele’s constraint is not needed to
   further enforce security, it only serves to constrain
   admin authentication to krb5 which I personally do not
   see as providing any added value.

2. The CERN infrastructure uses krb5, other sites like
   RAL do not.
parent 7a567544
No related branches found
No related tags found
No related merge requests found
Loading
0% Loading or .
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment